Lucene search
K

7 matches found

Cvelist
Cvelist
added 2022/08/23 6:30 a.m.11 views

CVE-2022-27637

Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1AI score0.00214EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/02/15 12:40 a.m.65 views

Privilege Escalation in Docker

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors...

7.2CVSS6.4AI score0.00032EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2021/04/27 6:15 a.m.16 views

CVE-2021-20714

Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors...

6.5CVSS0.02164EPSS
Exploits0References3
NVD
NVD
added 2016/06/07 6:59 p.m.14 views

CVE-2016-3093

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service block access to a web site via unspecified vectors...

5.3CVSS5.5AI score0.05068EPSS
Exploits0References5
Prion
Prion
added 2015/09/17 4:59 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML...

4.3CVSS6.1AI score0.00293EPSS
Exploits0References2Affected Software2
NVD
NVD
added 2014/12/16 6:59 p.m.9 views

CVE-2014-8583

modwsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors...

6.9CVSS6.6AI score0.00107EPSS
Exploits0References10
Cvelist
Cvelist
added 2014/01/15 12:30 a.m.22 views

CVE-2013-5795

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others...

5.4AI score0.75952EPSS
Exploits4References6
Rows per page
Query Builder